This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
File: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft (raw, json)
Hash identifier: Vh87tqvH1gxYCasGJkkkDzKqF/ZznKNYbpTF17snufA=
Subject key identifier: 1B:5B:73:61:F5:27:CC:8C:7D:83:E3:23:0A:98:56:8F:31:10:E7:F6
Authority key identifier: 9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
Certificate issuer: /CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Certificate serial: 019C43FD9DFE72E62102355EE9B259875AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
Manifest number: 0FA4
Signing time: Mon 09 Feb 2026 20:00:20 +0000
Manifest this update: Mon 09 Feb 2026 20:00:20 +0000
Manifest next update: Tue 10 Feb 2026 20:00:20 +0000
Files and hashes: 1: nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl (hash: MNjjBxUqbk5WnY8c4tzfLG5wXNwttrPXpmfOXhNilpk=)
2: wflbDoADYAsK4GD1fsBz6TdNDNU.roa (hash: 0r3hdg4G+H0uIyPzUPDcBYqQLBzzIsPKqLy64umuAXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:9d:fe:72:e6:21:02:35:5e:e9:b2:59:87:5a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c93eb8a7d19ffd7804765acfdcf2260c6c0d659
Validity
Not Before: Feb 9 20:00:20 2026 GMT
Not After : Feb 10 20:00:20 2026 GMT
Subject: CN=1b5b7361f527cc8c7d83e3230a98568f3110e7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:02:56:16:00:2d:58:a6:35:1d:1c:26:3b:
c2:57:3f:9f:c1:ae:52:e0:f7:12:0d:9e:81:0f:f5:
6d:4d:6a:70:53:3e:2a:4b:8a:3e:03:53:09:42:e0:
4a:a2:c8:ee:d6:53:62:be:f6:23:ae:0b:eb:50:fa:
94:76:14:81:8a:63:2e:9a:6a:49:cc:3d:af:b0:e7:
b0:89:c4:4b:b9:65:51:b2:17:7d:1c:1d:71:fb:1d:
ce:a0:79:03:51:be:fa:c8:50:d9:4e:9f:63:e4:ea:
bf:e2:fe:8f:b3:72:e9:48:1d:43:95:69:a5:97:aa:
36:74:99:95:7a:28:c3:7d:aa:0d:a5:93:62:85:25:
45:83:1b:17:4b:68:ab:3c:4e:42:f6:19:4f:52:85:
1f:35:e8:7b:82:57:29:30:09:28:c3:78:64:da:2d:
4d:f9:ff:9d:87:f0:0d:5a:cd:2f:f3:10:5d:a3:14:
27:24:38:93:d7:e6:e3:9b:11:a6:3d:f8:96:06:cb:
99:4e:28:d6:09:11:48:ad:0e:10:12:35:49:5a:74:
28:d4:20:fd:aa:f1:1c:a8:67:86:a7:ca:0d:b4:e8:
05:4a:ca:a0:c9:22:07:8f:d2:8a:6b:5d:69:45:b3:
c7:29:5b:ec:47:4b:5f:eb:87:f9:84:f8:4a:1f:35:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:73:61:F5:27:CC:8C:7D:83:E3:23:0A:98:56:8F:31:10:E7:F6
X509v3 Authority Key Identifier:
keyid:9C:93:EB:8A:7D:19:FF:D7:80:47:65:AC:FD:CF:22:60:C6:C0:D6:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/c3c45f-5f1c-47f2-910d-396ad701230e/1/nJPrin0Z_9eAR2Ws_c8iYMbA1lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:f2:b0:32:47:69:0d:5f:4a:09:bb:bd:be:5e:1a:08:43:
c4:b6:cc:f8:d9:86:90:a5:2a:b9:dc:75:42:c6:fe:ba:e5:ef:
84:ef:1f:e7:1d:b5:e7:0b:07:33:21:8e:52:16:7e:19:2e:1c:
8f:96:74:88:60:22:21:0e:3b:d4:27:51:e6:9e:24:51:2c:28:
32:dd:b2:aa:c5:f1:67:f2:ce:0c:2c:99:80:52:aa:f5:55:c8:
3a:d5:11:59:7c:2d:e8:25:d1:e8:e3:ea:9b:92:40:7a:1c:17:
77:79:f0:56:cd:95:48:bc:23:b2:86:2b:10:03:bf:5a:69:6b:
00:f7:09:60:bf:f9:20:6b:c7:93:1a:df:b8:c7:3a:f7:de:09:
7b:81:a9:2a:44:c8:d4:71:73:04:0c:e6:6c:af:e7:3c:62:1f:
c1:9c:53:31:4e:71:57:d4:5f:5f:4f:83:7f:d3:55:aa:ab:d3:
c9:14:a8:69:f1:22:dc:df:9d:35:7c:d2:b0:6b:07:4b:90:72:
d6:05:b3:24:c1:71:d6:72:ef:88:07:db:a9:1f:93:1e:e9:ad:
fc:55:dd:84:22:2c:ce:b7:04:06:2d:91:73:a1:0e:ec:81:53:
1d:da:7e:b7:32:c9:a6:6d:44:f9:b1:ca:fe:18:49:12:7e:cc:
fe:3d:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:46:55 2026 by rpki-client